Page 24 - Mironsoft Blog

A Docker image that gets built once and never checked for vulnerabilities again slowly turns into a security hole. Image scanning in the CI pipeline and automatic base image updates close that window before CVEs make it into production.

React StrictMode is not an optional comfort feature, it is an early-warning system for bugs that fail silently and treacherously in production. Why it renders components twice, fires useEffect twice, and what all of that has to do with Concurrent Features.

Magento 2 has shipped a solid, native two-factor module for several versions, but it exclusively protects the admin area. No comparable built-in solution exists for customer accounts, even though stores with saved payment data, store credit balances, or sensitive B2B order data have a legitimate interest in additionally securing the storefront login. This article shows how to wire a custom TOTP-based two-factor authentication for customer accounts cleanly into the existing authentication flow, including the UX trade-off between mandatory and opt-in, plus a well thought out recovery code concept.

Anyone starting Docker containers every day uses OverlayFS without usually knowing it. Understanding how lowerdir, upperdir, and workdir interact, and when the expensive copy up mechanism kicks in, makes it possible to design image layers more deliberately and avoid performance problems with large files inside containers.

Tags mark release points in the Git history, but only a consistent strategy built on annotated tags, a clear semantic versioning convention, and automated derivation makes them genuinely reliable for CI pipelines and deployment processes.

The App Router is not just a new directory, it fundamentally changes the mental model of Next.js. Layouts, Server Components, nested routes and the new data fetching paradigm require a thought-out migration plan that avoids production outages and does not overwhelm the team.

Stored procedures are among the least portable building blocks of SQL, because every major database system brings its own, incompatible procedural language. This article compares PL/pgSQL, T-SQL, and PL/SQL and shows concrete strategies to keep business logic in stored procedures migratable regardless.

A dark mode toggle that only kicks in after Alpine initializes briefly shows the wrong color scheme on page load before it switches over. This Flash of Unstyled Content is not an Alpine-specific problem, it is a question of ordering: whoever sets the theme before the first visible frame instead of after gets rid of the flicker entirely, without any extra library.

A Content Security Policy is the single most effective HTTP header against cross site scripting, yet most projects either skip it entirely or ship it with a far too generous whitelist. This article shows how a Content Security Policy grows from the first directive through nonces and hashes all the way to a hard enforcement mode, without suddenly breaking inline scripts or third party tools.

A split-pane layout with a mouse-draggable divider between two areas has become inseparable from modern code editors such as VS Code and is increasingly showing up in web applications with a file tree, a preview pane or comparison views. The challenge lies less in the obvious part, dragging the divider, and more in the details: dynamic grid column widths that have to be set through JavaScript rather than CSS alone, minimum width constraints so no panel disappears entirely, and cursor feedback that stays consistent throughout the drag. This article walks through the full setup of a split-pane layout with Tailwind CSS using the example of a code editor with a file tree on the left and an editor area on the right.